It's also likely that the vector was a vulnerable module he had installed.